[logs] Swatch stops monitoring after log rotation

Previous message: Shawn Leard: "Re: [logs] ASCII Spyware List"
Next in thread: Jim Prewett: "Re: [logs] Swatch stops monitoring after log rotation"
Reply: Jim Prewett: "Re: [logs] Swatch stops monitoring after log rotation"
Reply: Jeremy Mates: "[logs] Re: Swatch stops monitoring after log rotation"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

ktoney@private

I am using Mac OS X on a central log station with Swatch monitoring the 
logs. The problem I have is that Swatch does not monitor the new log 
files after the logs have been rotated. For example, after rotating the 
system.log file each night, I "kill-HUP" the syslog daemon so it will 
start writing to a new file. This is the line from the nightly script:

"if [ -f /var/run/syslog.pid ]; then kill -HUP $(cat 
/var/run/syslog.pid | head -1); fi"

After that I do the same for Swatch so it will monitor the new 
system.log file.

"if [ -f /var/run/swatch.pid ]; then kill -HUP $(cat 
/var/run/swatch.pid | head -1); fi"

Any suggestions on how I could modify/improve log rotations so Swatch 
will monitor the new logs?

Thanks

Ken

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis